CCI-000336

After system changes, verify that the impacted controls are operating as intended, meeting the security requirements for the system.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to verify in an operational environment, following changes to the information system, the security functions are operating as intended. The organization must maintain an audit trail of the verification of security functions.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the audit trail of the verification of security functions to ensure the organization being inspected/assessed verifies in an operational environment, following changes to the information system, the security functions are operating as intended.

Compelling Evidence

1.) Signed and dated process to verify security functions are operating as intended in an operational environment following changes to the information system 2.) Audit trail

The controls below (if any) were marked by NIST as being related to CCI-000336.